57befac41319e7e1fc9d6cd5637240fa766bdbc562d7720bb04beee36113ae10 | Triage

Analysis

max time kernel
148s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20230621-en
resource tags

arch:x64arch:x86image:win10v2004-20230621-enlocale:en-usos:windows10-2004-x64system
submitted
30-06-2023 12:20

Sharing

Report Analysis Logs

General

Target

Normativa/Normativa.url
Size

189B
MD5

f7f200f9159e911f84ae40e1a0c4e745
SHA1

edd6b298758d483e0610e607adb43fa86869e8b5
SHA256

c59dc482b521b021813681f99a8570aa0f57a30bcf42d48667eb09ae635cc9a1
SHA512

0c4ff6acebc2f967be05abffb35e6457bcf50359d7bec1ed7da8d000820d4cf264ae41ad3f83939cdbe9b2ede69a5316ed584f190be9a573642c83b1bc4d7b58

Score

5^/10

Malware Config

Signatures

Drops file in System32 directory 5 IoCs

description	ioc	Process
File created	C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\InstallService\{34553656-A46E-4257-86DD-5A975B36B7A9}.catalogItem	svchost.exe
File created	C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\InstallService\{C6B06509-8FB7-4658-8C18-3CC2859201AB}.catalogItem	svchost.exe
File created	C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\InstallService\{032CFE41-F2B9-4002-86DC-2452EA8AA511}.catalogItem	svchost.exe
File created	C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\InstallService\{787112EE-F723-469A-B4B6-7AF313DF7D63}.catalogItem	svchost.exe
File created	C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\InstallService\{5E9CCAA4-3781-44D6-B8F1-90F0801FFE3E}.catalogItem	svchost.exe

C:\Windows\System32\rundll32.exe
"C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL C:\Users\Admin\AppData\Local\Temp\Normativa\Normativa.url
1⤵
PID:728

C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k netsvcs -p
1⤵
- Drops file in System32 directory
PID:1460

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads